This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: B0EsVFMpiM0hyALSYguttPiwnkqFc1/ExHUJVXw8czk= Subject key identifier: 74:50:45:B9:25:98:16:C3:DE:71:67:B1:E4:31:72:80:2A:B7:7D:CE Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019BFBAE25F67D110C1ADD2BCC74EE68E37D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 14AC Signing time: Mon 26 Jan 2026 19:00:52 +0000 Manifest this update: Mon 26 Jan 2026 19:00:52 +0000 Manifest next update: Tue 27 Jan 2026 19:00:52 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (hash: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU=) 3: 6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa (hash: 5E//lm7xuj1KLaKmwKuy2vDVf/O+b6mxnpSRAQt5Fb0=) 4: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 5: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 6: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 7: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 8: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: /k1lBaoDPgRBAd3OGTIf49uLUQX4UwHYwnt76PEAn8E=) 10: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 11: pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa (hash: zNntPypAc/BTNmseu/NbwtVTxUXTvODLDW5Dni3vOfo=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:25:f6:7d:11:0c:1a:dd:2b:cc:74:ee:68:e3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 26 19:00:52 2026 GMT Not After : Jan 27 19:00:52 2026 GMT Subject: CN=745045b9259816c3de7167b1e43172802ab77dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:0b:ef:ea:d2:ae:64:1c:3e:e5:3c:23:eb: a0:ea:24:93:fd:ff:7b:d8:fc:5a:0a:b4:bc:3a:3a: 41:84:44:6d:49:49:1a:6c:14:7a:a6:3d:e6:cd:ee: 89:ca:bb:9f:4f:37:84:ff:3f:ba:2b:90:2a:60:be: 0f:2e:22:3d:e6:78:3f:0a:8e:18:ec:58:03:75:06: a6:26:f5:99:28:bd:5d:46:71:5c:48:eb:1a:aa:07: a8:03:c7:88:6c:55:e1:7b:31:6a:6f:18:93:df:a2: a1:63:40:48:83:24:bd:15:ba:f8:a1:21:b1:65:3e: 8a:b2:2f:49:64:c3:fc:da:78:32:98:00:17:ca:61: e8:2a:30:3b:e3:90:fe:88:cd:4d:e4:84:9e:fb:b1: 32:c8:59:45:a7:c4:7a:cf:f6:44:c4:4d:08:86:60: e9:10:76:ed:c6:37:42:c8:ab:ff:3e:04:c9:bd:f4: e7:1f:f2:30:ff:f8:17:12:5f:07:1f:c5:09:bb:d3: 78:fe:48:4c:ac:44:f4:7a:e0:cd:8f:a1:89:12:3e: 7f:89:71:36:84:ea:95:9f:fb:1e:ed:73:f8:01:23: ae:d0:76:60:6c:1a:83:57:1d:23:72:d4:58:93:5f: 1d:e5:13:f9:3c:5e:0f:47:1a:a7:e1:0f:d8:50:33: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:50:45:B9:25:98:16:C3:DE:71:67:B1:E4:31:72:80:2A:B7:7D:CE X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:99:c2:6a:d2:5f:01:c0:11:17:04:95:f7:75:55:2f:8f:ba: 2e:c3:d9:c3:bb:1d:c9:a7:74:47:94:b3:7a:53:eb:de:90:03: 30:4a:6b:df:f3:e5:6c:25:50:c4:00:52:14:da:ef:34:fd:a3: 9f:01:9c:e8:fc:3f:9c:43:12:8d:5e:c2:cd:ec:3c:04:c5:88: 66:2f:a7:61:c9:0d:8c:f2:93:17:5d:f1:c2:ad:86:a9:bc:fd: d9:27:af:db:71:73:e4:d6:e9:7b:49:45:23:bb:4c:8d:f0:bf: 20:df:5a:de:3e:66:c8:79:55:e1:ab:44:63:2b:f7:f3:79:13: 89:8d:c5:59:dc:0c:36:5d:4d:7d:8d:21:12:9b:1f:e0:22:80: fc:3d:da:d0:9f:bd:d6:4b:7b:68:e7:4c:f1:37:e7:24:43:38: 3b:2f:0e:c5:85:6d:46:91:ef:c2:f0:49:7e:77:58:52:07:38: 92:c7:25:77:b4:ee:0f:2a:be:b4:9d:32:ce:7f:55:63:6d:4c: 18:5e:97:a4:94:2c:15:ce:7c:e9:07:12:f9:bc:fd:f2:7f:5e: b1:af:89:1b:34:ca:d4:d2:ad:b0:5e:15:41:29:f2:a7:4a:23: fc:8c:a9:e5:1e:9f:39:26:84:36:53:bc:0c:d5:c6:3e:b6:db: ca:9a:59:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7riX2fREMGt0rzHTuaON9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTI2MTkwMDUyWhcNMjYwMTI3MTkwMDUyWjAzMTEwLwYDVQQD Eyg3NDUwNDViOTI1OTgxNmMzZGU3MTY3YjFlNDMxNzI4MDJhYjc3ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7QL7+rSrmQcPuU8I+ug6iST/f97 2PxaCrS8OjpBhERtSUkabBR6pj3mze6JyrufTzeE/z+6K5AqYL4PLiI95ng/Co4Y 7FgDdQamJvWZKL1dRnFcSOsaqgeoA8eIbFXhezFqbxiT36KhY0BIgyS9Fbr4oSGx ZT6Ksi9JZMP82ngymAAXymHoKjA745D+iM1N5ISe+7EyyFlFp8R6z/ZExE0IhmDp EHbtxjdCyKv/PgTJvfTnH/Iw//gXEl8HH8UJu9N4/khMrET0euDNj6GJEj5/iXE2 hOqVn/se7XP4ASOu0HZgbBqDVx0jctRYk18d5RP5PF4PRxqn4Q/YUDNkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRQRbklmBbD3nFnseQxcoAqt33OMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpnCatJf AcARFwSV93VVL4+6LsPZw7sdyad0R5SzelPr3pADMEpr3/PlbCVQxABSFNrvNP2j nwGc6Pw/nEMSjV7Czew8BMWIZi+nYckNjPKTF13xwq2Gqbz92Sev23Fz5Nbpe0lF I7tMjfC/IN9a3j5myHlV4atEYyv383kTiY3FWdwMNl1NfY0hEpsf4CKA/D3a0J+9 1kt7aOdM8TfnJEM4Oy8OxYVtRpHvwvBJfndYUgc4kscld7TuDyq+tJ0yzn9VY21M GF6XpJQsFc586QcS+bz98n9esa+JGzTK1NKtsF4VQSnyp0oj/Iyp5R6fOSaENlO8 DNXGPrbbyppZNQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:54 2026 by rpki-client